Skip to main content
fran1942
New Member
December 22, 2016
Solved

browsetime dataset problem

Hello, I have the following dataset which returns the bandwidth and browsetime of users who visit social media websites.

This report works perfectly when I run the 'test' feature within the dataset, however as soon as I place it in to a report, the output results are distorted i.e. browsetimes should as only 1 or 2 seconds.

Can anyone confirm if this dataset is structured correctly (even though it does work via 'test' in the dataset panel).

 

Dataset attached to this post.

    hzhao_FTNT
    Staff
    December 23, 2016

    Hi there, bandwidth need to be aggregated in main query, try:

    select user_src, sum(bandwidth) as bandwidth, ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) as browsetime from ###(select user_src, sum(bandwidth) as bandwidth, ebtr_agg_flat(browsetime) as browsetime from (select coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src,  ebtr_agg_flat($browse_time) as browsetime, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter and $browse_time is not null and (catdesc = 'Social Networking' or catdesc = 'Shopping' or catdesc = 'Games') group by user_src) t group by user_src order by ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) desc)### t group by user_src order by browsetime desc

     

    regards,

    hz

    1 reply

    hzhao_FTNT
    Staff
    Staff
    December 23, 2016

    Hi there, bandwidth need to be aggregated in main query, try:

    select user_src, sum(bandwidth) as bandwidth, ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) as browsetime from ###(select user_src, sum(bandwidth) as bandwidth, ebtr_agg_flat(browsetime) as browsetime from (select coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src,  ebtr_agg_flat($browse_time) as browsetime, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter and $browse_time is not null and (catdesc = 'Social Networking' or catdesc = 'Shopping' or catdesc = 'Games') group by user_src) t group by user_src order by ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) desc)### t group by user_src order by browsetime desc

     

    regards,

    hz

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT